Senior Software Engineer

INSPYR Solutions; Burbank (CA); On-site; USD 124,000 - 141,000; Full time

Job summary

INSPYR Solutions seeks a Senior Software Engineer to analyze lifecycle management of identities in Active Directory and Entra ID, and to help automate and modernize processes across on-prem and cloud deployments.

You will guide operations in decommissioning legacy AD, design RBAC/PIM controls, and support cross-tenant Entra governance while coordinating with outsourced vendors and security teams.

Qualifications

• 8+ years of work experience in Identity & Access Management.
• Experience designing, implementing, and integrating enterprise IAM solutions including Active Directory, Azure AD/Entra ID, MIM, and AD Federation.
• Experience with PAM platforms and RBAC/PIM across AD and Entra ID.

Responsibilities

• Analyze lifecycle management of identities in Active Directory and Entra and automate processes.
• Document and guide operations for decommissioning legacy AD instances.
• Evaluate capabilities of services/products to design future offerings through technical analysis.
• Assist with compliance and remediation activities for AD, Entra and related platforms.
• Define engineered designs with full documentation.
• Follow structured methodologies for technical analysis of products and solutions.

Skills

Identity & Access Management

Active Directory

Azure Active Directory / Entra ID

PAM Platforms

RBAC / PIM

PKI / Certificate management

LDAP integrations

Cross-tenant Entra governance

Service accounts lifecycle

Tools

CyberArk

Idira

Job description

Role: Senior Software Engineer (Active Directory & Entra)

Industry: Entertainment / Technology

Location: Burbank, CA or Seattle, WA or Orlando, FL

Duration: 11+ months, possibility for extension or conversion

Rate Range: $90-$102/hr

Work Requirements: US Citizen, GC Holders or Authorized to Work in US

Job Description

• Analyze the existing life cycle management of Identities created in Active Directory and Entra and help automate and modernize the process.
• Document and guide the operations team with the decommissioning of legacy instances of Active Directory.
• Evaluate capabilities of services/products and design solutions to deliver future service offerings through detailed technical analysis.
• Help with compliance and remediation activities of AD, Entra and related technology platforms.
• Define engineered designs, including full documentation
• Follow structured methodologies for technical analysis of products and solutions

Required Qualifications & Skills

• Minimum of 8 years of work experience in Identity & Access Management
• Demonstrated experience designing, implementing, and integrating enterprise-level highly connected hybrid IAM solutions including:
  • Active Directory
  • Azure Active Directory / Entra ID
  • Microsoft Identity Manager
  • Active Directory Federation
  • PAM Solutions
  • Integrations between key services and various LDAP providers.
• Experience with Cyber Ark / Idira will be a huge plus.
• Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets)
• Experience working with and directing suppliers in an outsourced environment infrastructure
• Hands-on experience with PAM platforms (e.g., CyberArk), including privileged account vaulting, Tier 0/1/2 credential management, and privileged access workstation (PAW) deployment
• Experience designing and enforcing role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID
• Experience with PKI architecture, certificate lifecycle management, and certificate authority rationalization or migration
• Experience with Active Directory domain consolidation, migration, and legacy domain decommissioning
• Familiarity with Entra ID governance, including cross-tenant identity governance models
• Experience automating non-human (service) account lifecycle management, including provisioning, ownership enforcement, and deprovisioning
• Experience conducting AD/Entra security baseline assessments and remediating identified findings

Project Work

PAM Onboarding, AD Standardization, Lifecycle Management

• Lead consolidation and decommissioning of the legacy MGMT and iDMZ Active Directory domains and their associated PKI infrastructure
• Onboard privileged accounts into the PAM platform, vaulting Tier 0/1/2 credentials and enforcing zero standing privileged access across AD domains
• Implement role-based access controls (RBAC) and privileged identity management (PIM) across Active Directory and Entra ID, replacing legacy, overly broad permissions
• Automate provisioning and deprovisioning of non-human (service) accounts, including ownership enforcement and lifecycle management
• Standardize AD architecture and governance across Enterprise Tech and business unit/segment-managed domains, including baseline security assessments
• Design and pilot cross-tenant Entra ID governance to extend identity controls across business segments and partners
• Deploy Privileged Access Workstations (PAW) and restrict Tier 0 administrative activity to hardened, isolated devices
• Remediate high-priority security findings across AD and Entra/M365 tenants to reduce the attack surface ahead of migration

Troubleshooting & Support

• Work with security and infrastructure teams to remediate vulnerabilities.
• Document configurations, policies, and procedures for future reference.

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.